CVE-2021-38114: Debian Linux

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
• Ffmpeg Ffmpeg: version 4.4 only

Published 2021-08-04. Last modified 2026-06-17.